Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61613a3a2f34382d3438203d3e203139333330.roa
File:                     323630323a663962613a61613a3a2f34382d3438203d3e203139333330.roa (raw, json)
Hash identifier:          +7syz0GBOwUaEaEEhgeSAtlPdDZ85ycnckt/BM1yTo0=
Subject key identifier:   6C:F1:C5:83:01:13:8D:01:36:03:FF:2C:7A:CE:D2:53:3B:34:F4:3A
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       0464B5A2F814C9E06845AF325C4AC3B9E9FA7E50
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61613a3a2f34382d3438203d3e203139333330.roa
Signing time:             Wed 16 Jul 2025 09:13:38 +0000
ROA not before:           Wed 16 Jul 2025 09:08:38 +0000
ROA not after:            Wed 15 Jul 2026 09:13:38 +0000
asID:                     19330
IP address blocks:        2602:f9ba:aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:64:b5:a2:f8:14:c9:e0:68:45:af:32:5c:4a:c3:b9:e9:fa:7e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:38 2025 GMT
            Not After : Jul 15 09:13:38 2026 GMT
        Subject: CN=6CF1C58301138D013603FF2C7ACED2533B34F43A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:aa:6e:8e:7e:fe:1c:61:24:49:76:9b:4c:5f:
                    6a:1b:8e:dd:d3:eb:12:79:bc:8d:b7:b8:2c:af:b3:
                    43:82:28:20:8f:fe:29:ef:64:cb:16:9d:35:23:33:
                    6f:b2:7f:56:1b:eb:ee:e3:80:1c:0f:22:03:f2:57:
                    d5:56:c5:4e:a9:e4:27:d8:28:23:6c:2d:a4:db:21:
                    bf:04:a0:42:61:4b:8d:fd:1a:90:42:3a:3d:7e:fa:
                    fe:68:09:7b:c1:92:b7:08:cf:6e:84:93:16:7b:d2:
                    93:98:72:91:61:e2:8d:ba:41:9a:33:d3:4d:e1:22:
                    9b:06:a5:ad:79:28:19:1e:5b:05:dd:d3:13:15:6e:
                    3c:86:b0:62:8b:3f:d2:80:0c:78:0d:e0:ce:98:b4:
                    6e:d6:e3:ca:b9:ae:83:d6:d8:11:fd:2d:80:f8:62:
                    45:56:8a:54:b4:e4:7d:19:4e:95:d9:c8:7b:91:2a:
                    6b:02:90:25:a3:80:41:64:af:9f:10:40:83:67:71:
                    b5:da:77:cd:01:34:1a:7f:2a:4b:82:78:8c:85:55:
                    fa:84:69:86:fd:ad:90:35:94:6d:50:60:2d:f1:01:
                    0e:1b:8a:7c:d6:92:b7:97:f5:96:62:f0:e6:c4:7c:
                    77:0a:55:f6:cf:72:dd:ff:f6:88:a7:ed:a1:9a:6c:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F1:C5:83:01:13:8D:01:36:03:FF:2C:7A:CE:D2:53:3B:34:F4:3A
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61613a3a2f34382d3438203d3e203139333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:5c:e4:e0:21:c5:4a:9a:c8:37:8d:c8:d4:dc:dd:e9:39:47:
         d7:72:10:99:06:aa:d4:6b:e9:b8:7d:d8:68:98:a6:cf:09:2f:
         ed:b2:78:55:6d:ec:01:f7:be:5a:a2:6e:2d:a5:84:61:17:dc:
         35:0d:cc:bb:6b:92:cb:36:e6:ce:cd:32:d7:ae:e5:81:89:d8:
         b1:29:f4:47:a4:18:63:98:c6:b3:5f:0d:54:82:3b:06:02:67:
         e0:7d:c6:56:66:de:ad:55:42:3d:8c:04:33:d3:b8:a4:de:30:
         76:96:8c:f5:4f:91:be:a7:3e:99:ea:1e:09:61:8e:bf:25:ae:
         5b:d0:7b:95:b7:70:64:42:65:52:53:66:43:dd:a2:ad:0e:76:
         ff:41:41:2b:7c:31:51:ab:72:87:3c:67:78:7d:79:85:8e:cb:
         6e:dc:d1:fb:c8:ff:80:b8:40:57:69:6b:3e:16:9a:f4:1c:db:
         18:f9:82:c2:d2:d1:a7:7f:a2:77:55:23:8f:66:46:53:af:1b:
         0c:97:a6:71:2b:e9:c4:3e:8b:66:25:6f:35:ea:b0:2e:13:54:
         1f:70:10:62:37:92:4d:d1:8a:82:8a:77:9d:b5:0b:8c:7e:21:
         25:17:71:7d:64:90:3e:12:4e:61:6a:8f:80:f5:46:e3:7e:01:
         73:0f:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:01 2025 by rpki-client